I'd like to use rsnapshot to backup my local computer as well as two remote machines to a portable storage device. My plan was to use
rsnaphot on the local machine, create a
backup user on the remote machines, and let my local root access the
backup account via ssh public keys. I didn't want to enable root login, I thought this might be a security feature.
So the problem starts: The remote backup user should be able to read as much as possible. How can I accomplish this? I could add this user to every existing group, this way he will be able to read every file which is group-readable. But this way, this user would also be able to write, delete, ... those files. Or I could change the group of every file to
backup or some such, but of course this would be too invasive and by the way very insane.
Copy my local root's public key to the remote root account and enabling root login would be the easiest way, heh? Should I do it?
How is this done correctly?